playwright 1.56.0-alpha-2025-09-23 → 1.56.0-alpha-1758747822000

package/lib/mcp/browser/response.js

@@ -18,16 +18,19 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var response_exports = {};
 __export(response_exports, {
-  Response: () => Response
+  Response: () => Response,
+  requestDebug: () => requestDebug
 });
 module.exports = __toCommonJS(response_exports);
+var import_utilsBundle = require("playwright-core/lib/utilsBundle");
 var import_tab = require("./tab");
+const requestDebug = (0, import_utilsBundle.debug)("pw:mcp:request");
 class Response {
   constructor(context, toolName, toolArgs) {
     this._result = [];
     this._code = [];
     this._images = [];
-    this._includeSnapshot = "none";
+    this._includeSnapshot = false;
     this._includeTabs = false;
     this._context = context;
     this.toolName = toolName;
@@ -58,14 +61,14 @@ class Response {
   images() {
     return this._images;
   }
-  setIncludeSnapshot(full) {
-    this._includeSnapshot = full ?? "partial";
+  setIncludeSnapshot() {
+    this._includeSnapshot = true;
   }
   setIncludeTabs() {
     this._includeTabs = true;
   }
   async finish() {
-    if (this._includeSnapshot !== "none" && this._context.currentTab())
+    if (this._includeSnapshot && this._context.currentTab())
       this._tabSnapshot = await this._context.currentTabOrDie().captureSnapshot();
     for (const tab of this._context.tabs())
       await tab.updateTitle();
@@ -73,7 +76,15 @@ class Response {
   tabSnapshot() {
     return this._tabSnapshot;
   }
-  serialize() {
+  logBegin() {
+    if (requestDebug.enabled)
+      requestDebug(this.toolName, this.toolArgs);
+  }
+  logEnd() {
+    if (requestDebug.enabled)
+      requestDebug(this.serialize({ omitSnapshot: true, omitBlobs: true }));
+  }
+  serialize(options = {}) {
     const response = [];
     if (this._result.length) {
       response.push("### Result");
@@ -87,13 +98,13 @@ ${this._code.join("\n")}
 \`\`\``);
       response.push("");
     }
-    if (this._includeSnapshot !== "none" || this._includeTabs)
+    if (this._includeSnapshot || this._includeTabs)
       response.push(...renderTabsMarkdown(this._context.tabs(), this._includeTabs));
     if (this._tabSnapshot?.modalStates.length) {
       response.push(...(0, import_tab.renderModalStates)(this._context, this._tabSnapshot.modalStates));
       response.push("");
     } else if (this._tabSnapshot) {
-      response.push(renderTabSnapshot(this._tabSnapshot, this._includeSnapshot === "full"));
+      response.push(renderTabSnapshot(this._tabSnapshot, options));
       response.push("");
     }
     const content = [
@@ -101,7 +112,7 @@ ${this._code.join("\n")}
     ];
     if (this._context.config.imageResponses !== "omit") {
       for (const image of this._images)
-        content.push({ type: "image", data: image.data.toString("base64"), mimeType: image.contentType });
+        content.push({ type: "image", data: options.omitBlobs ? "<blob>" : image.data.toString("base64"), mimeType: image.contentType });
     }
     this._redactSecrets(content);
     return { content, isError: this._isError };
@@ -117,7 +128,7 @@ ${this._code.join("\n")}
     }
   }
 }
-function renderTabSnapshot(tabSnapshot, fullSnapshot) {
+function renderTabSnapshot(tabSnapshot, options = {}) {
   const lines = [];
   if (tabSnapshot.consoleMessages.length) {
     lines.push(`### New console messages`);
@@ -138,15 +149,10 @@ function renderTabSnapshot(tabSnapshot, fullSnapshot) {
   lines.push(`### Page state`);
   lines.push(`- Page URL: ${tabSnapshot.url}`);
   lines.push(`- Page Title: ${tabSnapshot.title}`);
-  if (!fullSnapshot && tabSnapshot.formattedAriaSnapshotDiff) {
-    lines.push(`- Page Snapshot Diff:`);
-    lines.push(tabSnapshot.formattedAriaSnapshotDiff);
-  } else {
-    lines.push(`- Page Snapshot:`);
-    lines.push("```yaml");
-    lines.push(tabSnapshot.ariaSnapshot);
-    lines.push("```");
-  }
+  lines.push(`- Page Snapshot:`);
+  lines.push("```yaml");
+  lines.push(options.omitSnapshot ? "<snapshot>" : tabSnapshot.ariaSnapshot);
+  lines.push("```");
   return lines.join("\n");
 }
 function renderTabsMarkdown(tabs, force = false) {
@@ -175,5 +181,6 @@ function trim(text, maxLength) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  Response
+  Response,
+  requestDebug
 });

package/lib/mcp/browser/sessionLog.js

@@ -44,7 +44,7 @@ class SessionLog {
     this._file = import_path.default.join(this._folder, "session.md");
   }
   static async create(config, clientInfo) {
-    const sessionFolder = await (0, import_config.outputFile)(config, clientInfo, `session-${Date.now()}`, { origin: "code" });
+    const sessionFolder = await (0, import_config.outputFile)(config, clientInfo, `session-${Date.now()}`, { origin: "code", reason: "Saving session" });
     await import_fs.default.promises.mkdir(sessionFolder, { recursive: true });
     console.error(`Session: ${sessionFolder}`);
     return new SessionLog(sessionFolder);

package/lib/mcp/browser/tab.js

@@ -25,9 +25,10 @@ __export(tab_exports, {
 module.exports = __toCommonJS(tab_exports);
 var import_events = require("events");
 var import_utils = require("playwright-core/lib/utils");
-var import_utilsBundle = require("playwright-core/lib/utilsBundle");
 var import_utils2 = require("./tools/utils");
 var import_log = require("../log");
+var import_dialogs = require("./tools/dialogs");
+var import_files = require("./tools/files");
 const TabEvents = {
   modalState: "modalState"
 };
@@ -45,11 +46,7 @@ class Tab extends import_events.EventEmitter {
     this._onPageClose = onPageClose;
     page.on("console", (event) => this._handleConsoleMessage(messageToConsoleMessage(event)));
     page.on("pageerror", (error) => this._handleConsoleMessage(pageErrorToConsoleMessage(error)));
-    page.on("request", (request) => {
-      this._requests.set(request, null);
-      if (request.frame() === page.mainFrame() && request.isNavigationRequest())
-        this._willNavigateMainFrameToNewDocument();
-    });
+    page.on("request", (request) => this._requests.set(request, null));
     page.on("response", (response) => this._requests.set(response.request(), response));
     page.on("close", () => this._onClose());
     page.on("filechooser", (chooser) => {
@@ -57,7 +54,7 @@ class Tab extends import_events.EventEmitter {
         type: "fileChooser",
         description: "File chooser",
         fileChooser: chooser,
-        clearedBy: "browser_file_upload"
+        clearedBy: import_files.uploadFile.schema.name
       });
     });
     page.on("dialog", (dialog) => this._dialogShown(dialog));
@@ -106,14 +103,14 @@ class Tab extends import_events.EventEmitter {
       type: "dialog",
       description: `"${dialog.type()}" dialog with message "${dialog.message()}"`,
       dialog,
-      clearedBy: "browser_handle_dialog"
+      clearedBy: import_dialogs.handleDialog.schema.name
     });
   }
   async _downloadStarted(download) {
     const entry = {
       download,
       finished: false,
-      outputFile: await this.context.outputFile(download.suggestedFilename(), { origin: "web" })
+      outputFile: await this.context.outputFile(download.suggestedFilename(), { origin: "web", reason: "Saving download" })
     };
     this._downloads.push(entry);
     await download.saveAs(entry.outputFile);
@@ -132,9 +129,6 @@ class Tab extends import_events.EventEmitter {
     this._clearCollectedArtifacts();
     this._onPageClose(this);
   }
-  _willNavigateMainFrameToNewDocument() {
-    this._lastAriaSnapshot = void 0;
-  }
   async updateTitle() {
     await this._raceAgainstModalStates(async () => {
       this._lastTitle = await (0, import_utils2.callOnPageNoTrace)(this.page, (page) => page.title());
@@ -151,7 +145,6 @@ class Tab extends import_events.EventEmitter {
   }
   async navigate(url) {
     this._clearCollectedArtifacts();
-    this._willNavigateMainFrameToNewDocument();
     const downloadEvent = (0, import_utils2.callOnPageNoTrace)(this.page, (page) => page.waitForEvent("download").catch(import_log.logUnhandledError));
     try {
       await this.page.goto(url, { waitUntil: "domcontentloaded" });
@@ -185,7 +178,6 @@ class Tab extends import_events.EventEmitter {
         url: this.page.url(),
         title: await this.page.title(),
         ariaSnapshot: snapshot,
-        formattedAriaSnapshotDiff: this._lastAriaSnapshot ? generateAriaSnapshotDiff(this._lastAriaSnapshot, snapshot) : void 0,
         modalStates: [],
         consoleMessages: [],
         downloads: this._downloads
@@ -194,7 +186,6 @@ class Tab extends import_events.EventEmitter {
     if (tabSnapshot) {
       tabSnapshot.consoleMessages = this._recentConsoleMessages;
       this._recentConsoleMessages = [];
-      this._lastAriaSnapshot = tabSnapshot.ariaSnapshot;
     }
     return tabSnapshot ?? {
       url: this.page.url(),
@@ -276,23 +267,6 @@ function renderModalStates(context, modalStates) {
   return result;
 }
 const tabSymbol = Symbol("tabSymbol");
-function generateAriaSnapshotDiff(oldSnapshot, newSnapshot) {
-  const diffs = (0, import_utils.diffAriaSnapshots)(import_utilsBundle.yaml, oldSnapshot, newSnapshot);
-  if (diffs === "equal")
-    return "<no changes>";
-  if (diffs === "different")
-    return;
-  if (diffs.length > 3 || diffs.some((diff) => diff.newSource.split("\n").length > 100)) {
-    return;
-  }
-  const lines = [`The following refs have changed`];
-  for (const diff of diffs)
-    lines.push("", "```yaml", diff.newSource.trimEnd(), "```");
-  const combined = lines.join("\n");
-  if (combined.length >= newSnapshot.length)
-    return;
-  return combined;
-}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   Tab,

package/lib/mcp/browser/tools/dialogs.js

@@ -18,7 +18,8 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var dialogs_exports = {};
 __export(dialogs_exports, {
-  default: () => dialogs_default
+  default: () => dialogs_default,
+  handleDialog: () => handleDialog
 });
 module.exports = __toCommonJS(dialogs_exports);
 var import_bundle = require("../../sdk/bundle");
@@ -53,3 +54,7 @@ const handleDialog = (0, import_tool.defineTabTool)({
 var dialogs_default = [
   handleDialog
 ];
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  handleDialog
+});

package/lib/mcp/browser/tools/files.js

@@ -18,7 +18,8 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var files_exports = {};
 __export(files_exports, {
-  default: () => files_default
+  default: () => files_default,
+  uploadFile: () => uploadFile
 });
 module.exports = __toCommonJS(files_exports);
 var import_bundle = require("../../sdk/bundle");
@@ -51,3 +52,7 @@ const uploadFile = (0, import_tool.defineTabTool)({
 var files_default = [
   uploadFile
 ];
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  uploadFile
+});

package/lib/mcp/browser/tools/pdf.js

@@ -48,7 +48,7 @@ const pdf = (0, import_tool.defineTabTool)({
     type: "readOnly"
   },
   handle: async (tab, params, response) => {
-    const fileName = await tab.context.outputFile(params.filename ?? `page-${(0, import_utils.dateAsFileName)()}.pdf`, { origin: "llm" });
+    const fileName = await tab.context.outputFile(params.filename ?? (0, import_utils.dateAsFileName)("pdf"), { origin: "llm", reason: "Saving PDF" });
     response.addCode(`await page.pdf(${javascript.formatObject({ path: fileName })});`);
     response.addResult(`Saved page as ${fileName}`);
     await tab.page.pdf({ path: fileName });

package/lib/mcp/browser/tools/screenshot.js

@@ -63,7 +63,7 @@ const screenshot = (0, import_tool.defineTabTool)({
   },
   handle: async (tab, params, response) => {
     const fileType = params.type || "png";
-    const fileName = await tab.context.outputFile(params.filename ?? `page-${(0, import_utils.dateAsFileName)()}.${fileType}`, { origin: "llm" });
+    const fileName = await tab.context.outputFile(params.filename ?? (0, import_utils.dateAsFileName)(fileType), { origin: "llm", reason: "Saving screenshot" });
     const options = {
       type: fileType,
       quality: fileType === "png" ? void 0 : 90,

package/lib/mcp/browser/tools/snapshot.js

@@ -47,7 +47,7 @@ const snapshot = (0, import_tool.defineTool)({
   },
   handle: async (context, params, response) => {
     await context.ensureTab();
-    response.setIncludeSnapshot("full");
+    response.setIncludeSnapshot();
   }
 });
 const elementSchema = import_bundle.z.object({

package/lib/mcp/browser/tools/tracing.js

@@ -34,7 +34,7 @@ const tracingStart = (0, import_tool.defineTool)({
   },
   handle: async (context, params, response) => {
     const browserContext = await context.ensureBrowserContext();
-    const tracesDir = await context.outputFile(`traces`, { origin: "code" });
+    const tracesDir = await context.outputFile(`traces`, { origin: "code", reason: "Collecting trace" });
     const name = "trace-" + Date.now();
     await browserContext.tracing.start({
       name,

package/lib/mcp/browser/tools/utils.js

@@ -83,9 +83,9 @@ async function generateLocator(locator) {
 async function callOnPageNoTrace(page, callback) {
   return await page._wrapApiCall(() => callback(page), { internal: true });
 }
-function dateAsFileName() {
+function dateAsFileName(extension) {
   const date = /* @__PURE__ */ new Date();
-  return date.toISOString().replace(/[:.]/g, "-");
+  return `page-${date.toISOString().replace(/[:.]/g, "-")}.${extension}`;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/lib/mcp/browser/tools.js

@@ -70,6 +70,11 @@ const browserTools = [
   ...import_wait.default,
   ...import_verify.default
 ];
+const customPrefix = process.env.PLAYWRIGHT_MCP_TOOL_PREFIX;
+if (customPrefix) {
+  for (const tool of browserTools)
+    tool.schema.name = customPrefix + tool.schema.name;
+}
 function filteredTools(config) {
   return browserTools.filter((tool) => tool.capability.startsWith("core") || config.capabilities?.includes(tool.capability));
 }

package/lib/mcp/log.js

@@ -23,9 +23,9 @@ __export(log_exports, {
 });
 module.exports = __toCommonJS(log_exports);
 var import_utilsBundle = require("playwright-core/lib/utilsBundle");
-const errorsDebug = (0, import_utilsBundle.debug)("pw:mcp:errors");
+const errorDebug = (0, import_utilsBundle.debug)("pw:mcp:error");
 function logUnhandledError(error) {
-  errorsDebug(error);
+  errorDebug(error);
 }
 const testDebug = (0, import_utilsBundle.debug)("pw:mcp:test");
 // Annotate the CommonJS export names for ESM import in node:

package/lib/mcp/program.js

@@ -41,7 +41,7 @@ var import_browserServerBackend = require("./browser/browserServerBackend");
 var import_extensionContextFactory = require("./extension/extensionContextFactory");
 var import_host = require("./vscode/host");
 function decorateCommand(command, version) {
-  command.option("--allowed-origins <origins>", "semicolon-separated list of origins to allow the browser to request. Default is to allow all.", import_config.semicolonSeparatedList).option("--blocked-origins <origins>", "semicolon-separated list of origins to block the browser from requesting. Blocklist is evaluated before allowlist. If used without the allowlist, requests not matching the blocklist are still allowed.", import_config.semicolonSeparatedList).option("--block-service-workers", "block service workers").option("--browser <browser>", "browser or chrome channel to use, possible values: chrome, firefox, webkit, msedge.").option("--caps <caps>", "comma-separated list of additional capabilities to enable, possible values: vision, pdf.", import_config.commaSeparatedList).option("--cdp-endpoint <endpoint>", "CDP endpoint to connect to.").option("--cdp-header <headers...>", "CDP headers to send with the connect request, multiple can be specified.", import_config.headerParser).option("--config <path>", "path to the configuration file.").option("--device <device>", 'device to emulate, for example: "iPhone 15"').option("--executable-path <path>", "path to the browser executable.").option("--extension", 'Connect to a running browser instance (Edge/Chrome only). Requires the "Playwright MCP Bridge" browser extension to be installed.').option("--grant-permissions <permissions...>", 'List of permissions to grant to the browser context, for example "geolocation", "clipboard-read", "clipboard-write".', import_config.commaSeparatedList).option("--headless", "run browser in headless mode, headed by default").option("--host <host>", "host to bind server to. Default is localhost. Use 0.0.0.0 to bind to all interfaces.").option("--ignore-https-errors", "ignore https errors").option("--init-script <path...>", "path to JavaScript file to add as an initialization script. The script will be evaluated in every page before any of the page's scripts. Can be specified multiple times.").option("--isolated", "keep the browser profile in memory, do not save it to disk.").option("--image-responses <mode>", 'whether to send image responses to the client. Can be "allow" or "omit", Defaults to "allow".').option("--no-sandbox", "disable the sandbox for all process types that are normally sandboxed.").option("--output-dir <path>", "path to the directory for output files.").option("--port <port>", "port to listen on for SSE transport.").option("--proxy-bypass <bypass>", 'comma-separated domains to bypass proxy, for example ".com,chromium.org,.domain.com"').option("--proxy-server <proxy>", 'specify proxy server, for example "http://myproxy:3128" or "socks5://myproxy:8080"').option("--save-session", "Whether to save the Playwright MCP session into the output directory.").option("--save-trace", "Whether to save the Playwright Trace of the session into the output directory.").option("--secrets <path>", "path to a file containing secrets in the dotenv format", import_config.dotenvFileLoader).option("--shared-browser-context", "reuse the same browser context between all connected HTTP clients.").option("--storage-state <path>", "path to the storage state file for isolated sessions.").option("--timeout-action <timeout>", "specify action timeout in milliseconds, defaults to 5000ms", import_config.numberParser).option("--timeout-navigation <timeout>", "specify navigation timeout in milliseconds, defaults to 60000ms", import_config.numberParser).option("--user-agent <ua string>", "specify user agent string").option("--user-data-dir <path>", "path to the user data directory. If not specified, a temporary directory will be created.").option("--viewport-size <size>", 'specify browser viewport size in pixels, for example "1280, 720"').addOption(new import_utilsBundle.ProgramOption("--connect-tool", "Allow to switch between different browser connection methods.").hideHelp()).addOption(new import_utilsBundle.ProgramOption("--vscode", "VS Code tools.").hideHelp()).addOption(new import_utilsBundle.ProgramOption("--vision", "Legacy option, use --caps=vision instead").hideHelp()).action(async (options) => {
+  command.option("--allowed-hosts <hosts...>", "comma-separated list of hosts this server is allowed to serve from. Defaults to the host the server is bound to.", import_config.commaSeparatedList).option("--allowed-origins <origins>", "semicolon-separated list of origins to allow the browser to request. Default is to allow all.", import_config.semicolonSeparatedList).option("--blocked-origins <origins>", "semicolon-separated list of origins to block the browser from requesting. Blocklist is evaluated before allowlist. If used without the allowlist, requests not matching the blocklist are still allowed.", import_config.semicolonSeparatedList).option("--block-service-workers", "block service workers").option("--browser <browser>", "browser or chrome channel to use, possible values: chrome, firefox, webkit, msedge.").option("--caps <caps>", "comma-separated list of additional capabilities to enable, possible values: vision, pdf.", import_config.commaSeparatedList).option("--cdp-endpoint <endpoint>", "CDP endpoint to connect to.").option("--cdp-header <headers...>", "CDP headers to send with the connect request, multiple can be specified.", import_config.headerParser).option("--config <path>", "path to the configuration file.").option("--device <device>", 'device to emulate, for example: "iPhone 15"').option("--executable-path <path>", "path to the browser executable.").option("--extension", 'Connect to a running browser instance (Edge/Chrome only). Requires the "Playwright MCP Bridge" browser extension to be installed.').option("--grant-permissions <permissions...>", 'List of permissions to grant to the browser context, for example "geolocation", "clipboard-read", "clipboard-write".', import_config.commaSeparatedList).option("--headless", "run browser in headless mode, headed by default").option("--host <host>", "host to bind server to. Default is localhost. Use 0.0.0.0 to bind to all interfaces.").option("--ignore-https-errors", "ignore https errors").option("--init-script <path...>", "path to JavaScript file to add as an initialization script. The script will be evaluated in every page before any of the page's scripts. Can be specified multiple times.").option("--isolated", "keep the browser profile in memory, do not save it to disk.").option("--image-responses <mode>", 'whether to send image responses to the client. Can be "allow" or "omit", Defaults to "allow".').option("--no-sandbox", "disable the sandbox for all process types that are normally sandboxed.").option("--output-dir <path>", "path to the directory for output files.").option("--port <port>", "port to listen on for SSE transport.").option("--proxy-bypass <bypass>", 'comma-separated domains to bypass proxy, for example ".com,chromium.org,.domain.com"').option("--proxy-server <proxy>", 'specify proxy server, for example "http://myproxy:3128" or "socks5://myproxy:8080"').option("--save-session", "Whether to save the Playwright MCP session into the output directory.").option("--save-trace", "Whether to save the Playwright Trace of the session into the output directory.").option("--save-video <size>", 'Whether to save the video of the session into the output directory. For example "--save-video=800x600"', import_config.resolutionParser.bind(null, "--save-video")).option("--secrets <path>", "path to a file containing secrets in the dotenv format", import_config.dotenvFileLoader).option("--shared-browser-context", "reuse the same browser context between all connected HTTP clients.").option("--storage-state <path>", "path to the storage state file for isolated sessions.").option("--timeout-action <timeout>", "specify action timeout in milliseconds, defaults to 5000ms", import_config.numberParser).option("--timeout-navigation <timeout>", "specify navigation timeout in milliseconds, defaults to 60000ms", import_config.numberParser).option("--user-agent <ua string>", "specify user agent string").option("--user-data-dir <path>", "path to the user data directory. If not specified, a temporary directory will be created.").option("--viewport-size <size>", 'specify browser viewport size in pixels, for example "1280x720"', import_config.resolutionParser.bind(null, "--viewport-size")).addOption(new import_utilsBundle.ProgramOption("--connect-tool", "Allow to switch between different browser connection methods.").hideHelp()).addOption(new import_utilsBundle.ProgramOption("--vscode", "VS Code tools.").hideHelp()).addOption(new import_utilsBundle.ProgramOption("--vision", "Legacy option, use --caps=vision instead").hideHelp()).action(async (options) => {
     (0, import_watchdog.setupExitWatchdog)();
     if (options.vision) {
       console.error("The --vision option is deprecated, use --caps=vision instead");

package/lib/mcp/sdk/http.js

@@ -67,19 +67,31 @@ function httpAddressToString(address) {
     resolvedHost = "localhost";
   return `http://${resolvedHost}:${resolvedPort}`;
 }
-async function installHttpTransport(httpServer, serverBackendFactory) {
+async function installHttpTransport(httpServer, serverBackendFactory, allowedHosts) {
+  const url = httpAddressToString(httpServer.address());
+  const host = new URL(url).host;
+  allowedHosts = (allowedHosts || [host]).map((h) => h.toLowerCase());
   const sseSessions = /* @__PURE__ */ new Map();
   const streamableSessions = /* @__PURE__ */ new Map();
   httpServer.on("request", async (req, res) => {
-    const url = new URL(`http://localhost${req.url}`);
-    if (url.pathname === "/killkillkill" && req.method === "GET") {
+    const host2 = req.headers.host?.toLowerCase();
+    if (!host2) {
+      res.statusCode = 400;
+      return res.end("Missing host");
+    }
+    if (!allowedHosts.includes(host2)) {
+      res.statusCode = 403;
+      return res.end("Access is only allowed at " + allowedHosts.join(", "));
+    }
+    const url2 = new URL(`http://localhost${req.url}`);
+    if (url2.pathname === "/killkillkill" && req.method === "GET") {
       res.statusCode = 200;
       res.end("Killing process");
       process.emit("SIGINT");
       return;
     }
-    if (url.pathname.startsWith("/sse"))
-      await handleSSE(serverBackendFactory, req, res, url, sseSessions);
+    if (url2.pathname.startsWith("/sse"))
+      await handleSSE(serverBackendFactory, req, res, url2, sseSessions);
     else
       await handleStreamable(serverBackendFactory, req, res, streamableSessions);
   });

package/lib/mcp/sdk/server.js

@@ -124,8 +124,8 @@ async function start(serverBackendFactory, options) {
     return;
   }
   const httpServer = await (0, import_http.startHttpServer)(options);
-  await (0, import_http.installHttpTransport)(httpServer, serverBackendFactory);
   const url = (0, import_http.httpAddressToString)(httpServer.address());
+  await (0, import_http.installHttpTransport)(httpServer, serverBackendFactory, options.allowedHosts);
   const mcpConfig = { mcpServers: {} };
   mcpConfig.mcpServers[serverBackendFactory.nameInConfig] = {
     url: `${url}/mcp`

package/lib/mcp/test/browserBackend.js

@@ -28,8 +28,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var browserBackend_exports = {};
 __export(browserBackend_exports, {
-  runBrowserBackendAtEnd: () => runBrowserBackendAtEnd,
-  runBrowserBackendOnError: () => runBrowserBackendOnError
+  runBrowserBackendAtEnd: () => runBrowserBackendAtEnd
 });
 module.exports = __toCommonJS(browserBackend_exports);
 var mcp = __toESM(require("../sdk/exports"));
@@ -37,42 +36,40 @@ var import_globals = require("../../common/globals");
 var import_util = require("../../util");
 var import_config = require("../browser/config");
 var import_browserServerBackend = require("../browser/browserServerBackend");
-async function runBrowserBackendOnError(page, message) {
+async function runBrowserBackendAtEnd(context, errorMessage) {
   const testInfo = (0, import_globals.currentTestInfo)();
-  if (!testInfo || !testInfo._pauseOnError())
+  if (!testInfo)
     return;
-  const config = {
-    ...import_config.defaultConfig,
-    capabilities: ["testing"]
-  };
-  const snapshot = await page._snapshotForAI();
-  const introMessage = `### Paused on error:
-${(0, import_util.stripAnsiEscapes)(message())}
-
-### Current page snapshot:
-${snapshot}
-
-### Task
-Try recovering from the error prior to continuing`;
-  await mcp.runOnPauseBackendLoop(new import_browserServerBackend.BrowserServerBackend(config, identityFactory(page.context())), introMessage);
-}
-async function runBrowserBackendAtEnd(context) {
-  const testInfo = (0, import_globals.currentTestInfo)();
-  if (!testInfo || !testInfo._pauseAtEnd())
+  const shouldPause = errorMessage ? testInfo?._pauseOnError() : testInfo?._pauseAtEnd();
+  if (!shouldPause)
     return;
-  const page = context.pages()[0];
-  if (!page)
-    return;
-  const snapshot = await page._snapshotForAI();
-  const introMessage = `### Paused at end of test. ready for interaction
-
-### Current page snapshot:
-${snapshot}`;
+  const lines = [];
+  if (errorMessage)
+    lines.push(`### Paused on error:`, (0, import_util.stripAnsiEscapes)(errorMessage));
+  else
+    lines.push(`### Paused at end of test. ready for interaction`);
+  for (let i = 0; i < context.pages().length; i++) {
+    const page = context.pages()[i];
+    const stateSuffix = context.pages().length > 1 ? i + 1 + " of " + context.pages().length : "state";
+    lines.push(
+      "",
+      `### Page ${stateSuffix}`,
+      `- Page URL: ${page.url()}`,
+      `- Page Title: ${await page.title()}`.trim(),
+      `- Page Snapshot:`,
+      "```yaml",
+      await page._snapshotForAI(),
+      "```"
+    );
+  }
+  lines.push("");
+  if (errorMessage)
+    lines.push(`### Task`, `Try recovering from the error prior to continuing`);
   const config = {
     ...import_config.defaultConfig,
     capabilities: ["testing"]
   };
-  await mcp.runOnPauseBackendLoop(new import_browserServerBackend.BrowserServerBackend(config, identityFactory(context)), introMessage);
+  await mcp.runOnPauseBackendLoop(new import_browserServerBackend.BrowserServerBackend(config, identityFactory(context)), lines.join("\n"));
 }
 function identityFactory(browserContext) {
   return {
@@ -87,6 +84,5 @@ function identityFactory(browserContext) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  runBrowserBackendAtEnd,
-  runBrowserBackendOnError
+  runBrowserBackendAtEnd
 });

package/lib/program.js

@@ -174,12 +174,12 @@ function addInitAgentsCommand(program3) {
   const command = program3.command("init-agents", { hidden: true });
   command.description("Initialize repository agents for the Claude Code");
   const option = command.createOption("--loop <loop>", "Agentic loop provider");
-  option.choices(["claude", "opencode", "vscode"]);
+  option.choices(["code", "claude", "opencode"]);
   command.addOption(option);
   command.action(async (opts) => {
     if (opts.loop === "opencode")
       await (0, import_generateAgents.initOpencodeRepo)();
-    else if (opts.loop === "vscode")
+    else if (opts.loop === "code")
       await (0, import_generateAgents.initVSCodeRepo)();
     else if (opts.loop === "claude")
       await (0, import_generateAgents.initClaudeCodeRepo)();
@@ -197,7 +197,8 @@ async function runTests(args, opts) {
   config.cliProjectFilter = opts.project || void 0;
   config.cliPassWithNoTests = !!opts.passWithNoTests;
   config.cliLastFailed = !!opts.lastFailed;
-  config.cliLastRunFile = opts.lastRunFile ? import_path.default.resolve(process.cwd(), opts.lastRunFile) : void 0;
+  config.cliTestList = opts.testList ? import_path.default.resolve(process.cwd(), opts.testList) : void 0;
+  config.cliTestListInvert = opts.testListInvert ? import_path.default.resolve(process.cwd(), opts.testListInvert) : void 0;
   (0, import_projectUtils.filterProjects)(config.projects, config.cliProjectFilter);
   if (opts.ui || opts.uiHost || opts.uiPort) {
     if (opts.onlyChanged)
@@ -356,7 +357,6 @@ const testOptions = [
   ["--headed", { description: `Run tests in headed browsers (default: headless)` }],
   ["--ignore-snapshots", { description: `Ignore screenshot and snapshot expectations` }],
   ["--last-failed", { description: `Only re-run the failures` }],
-  ["--last-run-file <file>", { description: `Path to the last-run file (default: "test-results/.last-run.json")` }],
   ["--list", { description: `Collect all the tests and report them, but do not run` }],
   ["--max-failures <N>", { description: `Stop after the first N failures` }],
   ["--no-deps", { description: `Do not run project dependencies` }],
@@ -369,6 +369,8 @@ const testOptions = [
   ["--reporter <reporter>", { description: `Reporter to use, comma-separated, can be ${import_config.builtInReporters.map((name) => `"${name}"`).join(", ")} (default: "${import_config.defaultReporter}")` }],
   ["--retries <retries>", { description: `Maximum retry count for flaky tests, zero for no retries (default: no retries)` }],
   ["--shard <shard>", { description: `Shard tests and execute only the selected shard, specify in the form "current/all", 1-based, for example "3/5"` }],
+  ["--test-list <file>", { description: `Path to a file containing a list of tests to run. See https://playwright.dev/docs/test-cli for more details.` }],
+  ["--test-list-invert <file>", { description: `Path to a file containing a list of tests to skip. See https://playwright.dev/docs/test-cli for more details.` }],
   ["--timeout <timeout>", { description: `Specify test timeout threshold in milliseconds, zero for unlimited (default: ${import_config.defaultTimeout})` }],
   ["--trace <mode>", { description: `Force tracing mode`, choices: kTraceModes }],
   ["--tsconfig <path>", { description: `Path to a single tsconfig applicable to all imported files (default: look up tsconfig for each imported file separately)` }],

package/lib/runner/lastRun.js

@@ -37,27 +37,17 @@ var import_projectUtils = require("./projectUtils");
 class LastRunReporter {
   constructor(config) {
     this._config = config;
-    if (config.cliLastRunFile) {
-      this._lastRunFile = config.cliLastRunFile;
-    } else {
-      const [project] = (0, import_projectUtils.filterProjects)(config.projects, config.cliProjectFilter);
-      if (project)
-        this._lastRunFile = import_path.default.join(project.project.outputDir, ".last-run.json");
-    }
+    const [project] = (0, import_projectUtils.filterProjects)(config.projects, config.cliProjectFilter);
+    if (project)
+      this._lastRunFile = import_path.default.join(project.project.outputDir, ".last-run.json");
   }
-  async applyFilter() {
+  async filterLastFailed() {
     if (!this._lastRunFile)
       return;
     try {
       const lastRunInfo = JSON.parse(await import_fs.default.promises.readFile(this._lastRunFile, "utf8"));
-      if (lastRunInfo.filterTests) {
-        const filterTestIds = new Set(lastRunInfo.filterTests);
-        this._config.preOnlyTestFilters.push((test) => filterTestIds.has(test.id));
-      }
-      if (this._config.cliLastFailed) {
-        const failedTestIds = new Set(lastRunInfo.failedTests ?? []);
-        this._config.postShardTestFilters.push((test) => failedTestIds.has(test.id));
-      }
+      const failedTestIds = new Set(lastRunInfo.failedTests);
+      this._config.postShardTestFilters.push((test) => failedTestIds.has(test.id));
     } catch {
     }
   }